Privacy Policy

Last updated: November 8, 2026

1. Who we are

ExitPin (“ExitPin”, “we”, “us”) makes ExitPin, a traffic-routing utility for macOS, and runs this website, exitpin.com. We are the controller of the personal data described in this policy. You can reach us at support@exitpin.com.

ExitPin does not provide, sell or operate VPN or proxy servers; users connect their own infrastructure. The app routes the traffic of the apps and websites you choose through proxies or VPNs that you obtain and configure yourself.

2. The short version

• Everything the app needs is stored on your Mac. There is no account, no cloud sync, no analytics and no telemetry.
• Your traffic goes from your Mac straight to the proxy or network you chose. It never passes through our servers, and we do not log it.
• Your license key is checked offline, on your Mac. Activating it sends nothing to us or to anyone else.
• When you buy, our reseller Paddle shares your email, country and transaction number with us so we can send your key and support you.

3. Data stored only on your Mac

• Settings. Your list of apps, websites, routes, proxies and time zones.
• Proxy passwords. Kept in your macOS Keychain. We cannot see or access them.
• Connection log. When each app connected and whether a connection was held back. It records no traffic content and is never uploaded.
• License key and trial start. The key is verified on your Mac against an Ed25519 signature; the date your 7-day trial started is kept in your Keychain and app settings.

ExitPin does not record, inspect or upload the content of your traffic. Removing ExitPin and its settings removes all of this from your Mac.

4. Connection checks

To show you which address, country and network type a service sees, the app can run a connection check. You start it yourself, for example when you add a proxy or open the protection check. A check works like this:

• The app sends a request through your own proxy to a public IP service, api.ipify.org, which returns the public IP address that proxy exits from.
• The app then sends that public IP address, again through your proxy, to our check service, hosted on Vercel. The check service looks the address up in third-party IP-information databases: ip-api, proxycheck.io, ipapi.is, ipto.to, worldip.io, ip2location.io, ipinfo and IPQualityScore. It returns the country, city, network type and reputation of that address.
• The check service does not store the IP address or link it to you. It keeps results only in a short-lived in-memory cache (at most a few hours), which is not written to disk and is lost on restart.

The address checked is the public address of your proxy, not your own home address, unless you choose to check a route that goes out directly.

5. Purchases and license delivery

• Paddle is our Merchant of Record. Payments, invoices, taxes and refunds are handled by Paddle.com under its own privacy policy. We never see your card or payment details.
• What we receive from Paddle: your email address, your country and the transaction number.
• Key delivery. Our license service, running on Cloudflare Workers, creates your license key after Paddle confirms the payment and sends it to your email through Resend, an email delivery provider.
• What we keep: the transaction number and your email address, to resend a lost key, process update renewals and answer support requests.

6. The website

• Hosting. exitpin.com is served by Cloudflare, which processes standard request data such as your IP address and browser type to deliver the site and protect it from abuse.
• Fonts. Pages load fonts from Google Fonts, which receives standard request data such as your IP address.
• Checkout. Pages with prices load Paddle.js to show prices in your currency and open the checkout. Paddle may use cookies or similar technologies for checkout and fraud prevention under its own policy.
• Analytics. We count visits with Umami Cloud, a privacy-focused analytics service. It sets no cookies, does not store your IP address and does not build a profile of you. It records the page you open, the site you came from, your browser, operating system, device type and country, and clicks on the download, buy and check-again buttons. There are no advertising trackers and no cookies of our own. The site remembers the language you pick in your browser's local storage; this stays on your device and is not sent to us.

7. Email and support

If you write to us, we use your message and email address only to answer you and to keep a record of the conversation.

8. Legal bases

Where the EU or UK GDPR applies, we process personal data on these grounds:

• Performance of a contract: delivering your license key, renewals and support, and running the connection checks you ask for.
• Legitimate interests: keeping the website and our services secure and working, preventing fraud, and keeping records of support conversations.
• Legal obligations: keeping transaction records where tax or accounting law requires it.

9. How long we keep data

• Data on your Mac stays there until you delete it or remove the app.
• Connection checks: not stored; in-memory cache only, for at most a few hours.
• Transaction number and email: for as long as you hold a license and need key resends, renewals or support, and afterwards only as long as the law requires. You can ask us to delete them sooner.
• Support emails: until the matter is resolved and for a reasonable period afterwards, then deleted.

10. Service providers and international transfers

We use these providers to run ExitPin: Paddle (payments), Cloudflare (website and license service), Resend (email delivery), Vercel (check service), Umami (website analytics), Google Fonts (web fonts) and the IP-information databases listed in section 4. Some of them process data outside the European Economic Area and the UK, including in the United States. Where this happens, the transfer relies on safeguards such as the European Commission's Standard Contractual Clauses, the UK Addendum or the EU–US Data Privacy Framework, as offered by each provider. We do not sell or rent personal data and do not share it for advertising.

11. Your rights

Depending on where you live, including under the EU GDPR, the UK GDPR and the California Consumer Privacy Act (CCPA), you have the right to:

• access the personal data we hold about you and get a copy of it;
• correct it or have it deleted;
• restrict or object to its processing;
• receive it in a portable format;
• know what categories of data we collect and why. We do not sell or share personal information as those terms are defined in the CCPA, and we will not treat you differently for using your rights.

To use any of these rights, write to support@exitpin.com from the email address you used to buy, or include your transaction number. We reply within 30 days. You can also complain to your local data protection authority.

12. Children

ExitPin is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

13. Changes to this policy

We may update this policy when the app or our providers change. We will post the new version on this page with a new “Last updated” date, and for material changes we will give notice on this site before they take effect.

14. Contact

Questions about privacy: support@exitpin.com